Itinistry Privacy Policy
Effective and updated: October 17, 2026
This policy describes how Itinistry handles information on itinistry.com and in Itinistry Discover. Contact Itinistry at itinistry@gmail.com with privacy questions or requests. Itinistry is the service name used in this notice.
1. Services covered
This notice covers our public website, demo and licensing inquiries, public AI product demonstrations, and the Google Search Console connection used by Itinistry Discover. Discover currently operates as a limited pilot for the Itinistry website. A working pilot does not mean that customer website onboarding or every planned SEO and AI visibility feature is available.
Travel agencies using Itinistry may separately collect and manage traveler information. Their own notices and instructions apply to their use of client information. Do not provide real traveler details in public demonstrations.
2. Information you provide and technical records
When you request a walkthrough or licensing information, we collect the name, work email, agency name, team-size selection, interest, optional notes and contact consent you submit. We store this information to respond to the request and manage the inquiry.
Our website and infrastructure providers process technical information needed to deliver and protect the service, such as request, device/browser, connection, security and error information. Public product chat sessions have a hashed session identifier, message count and activity times to enforce demo limits. Session expiry limits use of the demo; it does not automatically delete stored records.
Do not enter payment-card numbers, passwords, passport numbers or other sensitive information in website inquiries or public chats.
3. Public AI demonstrations
The public product chatbot sends your message and recent conversation context to OpenAI to generate a response. Chat content can also appear in operational request or error records. Use fictional details and do not submit private client information. The traveler-planning demo runs as a separate Itinistry demonstration hosted through Zite and should also be used only with sample details.
The interactive CRM tour uses fictional records. Clicking its sample controls does not create real reservations, payments or client messages. Google Search Console data is not sent to the public AI demos or used to train general-purpose AI models.
4. Google Search Console data accessed by Discover
If you authorize the Google connection, Discover requests read-only Search Console access and basic Google account identification. We access an account identifier, granted permissions, accessible Search Console properties and permission levels, and search reporting data such as queries, pages, dates, clicks, impressions, click-through rate and average position. We also access URL inspection results such as indexing, crawling and canonical status for the authorized property.
We store connection identifiers, the selected property, permissions, connection metadata and an encrypted refresh token so authorized reporting can continue without a sign-in for every check. Saved reporting includes daily clicks and impressions, collection history, indexing results, sitemap inventory and in-app alerts. Query and page results may be processed to display on-demand reports without being saved as daily snapshot records.
We use this data to provide authorized search reporting, indexing checks, visibility comparisons and monitoring alerts. Read-only access does not let Discover edit your website or Search Console settings, and does not itself submit Google indexing requests.
5. How Google data is used and shared
Itinistry's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google data is used for the visible Discover reporting and monitoring features, not for advertising, sale to data brokers, credit decisions or unrelated profiling.
Google data is processed through service providers needed to operate Discover, including Zite, Vercel and Supabase. We do not allow human access to Google data except with your affirmative agreement for specific data, where necessary for security or legal compliance, or as otherwise permitted by Google's Limited Use requirements. We do not publish private Search Console reports to other agencies or public AI demonstrations.
6. Other service providers and disclosures
We use providers for hosting, application delivery, databases, security and AI responses. These include Zite, Vercel, Supabase, Google and OpenAI where relevant to the feature you use. Providers process the information needed to deliver those functions under their applicable service terms and privacy practices. Information may be processed in countries other than your own.
We may disclose information when necessary to comply with applicable law, protect the service or address abuse and security issues. We do not sell Google user data or use it for targeted advertising. External links and third-party services have their own privacy notices.
7. Storage, retention and security
We use HTTPS for service connections, access controls for administrative reporting and encryption for stored Google refresh tokens. No transmission or storage system is risk-free.
We retain inquiries, reporting records and operational information for as long as needed to provide the relevant service, respond to requests, resolve issues and meet applicable obligations. There is not yet an automatic deletion schedule for all pilot records. You can request deletion by email; we may need limited records for security, legal obligations or backup recovery, and will explain any applicable limitation.
8. Your choices and requests
You can decline Google authorization and stop future Google access by removing Itinistry's connection in your Google Account's third-party connections settings. Revoking permission does not automatically delete previously collected reports from Itinistry.
Email itinistry@gmail.com to request access, correction or deletion of information, removal of a stored Google connection, or an end to inquiry follow-up. Identify the email address or website involved, but do not send passwords or tokens. We may verify that you are authorized before acting on a request. Available rights depend on your location and circumstances.
9. Children and changes
Our website and Discover are intended for adult travel professionals and business users, not children. Public demos should contain fictional traveler information. If you believe a child has submitted personal information directly to us, contact itinistry@gmail.com.
We will update the date on this page when the notice changes. If we introduce a materially different use of Google data, we will update the disclosures and obtain any required consent before that new use.